Multiple vulnerabilities in Microsoft Nuance PowerScribe

Description

Multiple vulnerabilities were found in Microsoft Nuance PowerScribe. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Nuance PowerScribe can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Microsoft Azure Network Adapter can be exploited remotely to gain privileges.
3. A security feature bypass vulnerability in Microsoft Visual Studio Code CoPilot Chat can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2026-26142

• CVE-2026-45476
• CVE-2026-50519

Exploitation

Related products

• Nuance-PowerScribe

CVE list

• CVE-2026-26142
  critical
• CVE-2026-45476
  critical
• CVE-2026-50519
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com